Re: [I] rocketmq开启acl后plain_acl.yml这个文件如何持久化 [rocketmq-operator]

["bugsmo (via GitHub)" <gi...@apache.org>]

bugsmo commented on issue #215:
URL: https://github.com/apache/rocketmq-operator/issues/215#issuecomment-2205286106

   挂载自定义ACL有了新的姿势。
   1. 创建acl configmap，`kubectl create configmap broker-acl --from-file=plain_acl.yml=plain_acl.yml`
   2. broker cr配置acl configmap，`kubectl edit brokers.rocketmq.apache.org rocketmq-cluster-test`
   ```yaml
   apiVersion: rocketmq.apache.org/v1alpha1
   kind: Broker
   ...
   spec:
   volumes:
     - configMap:
         name: broker-acl
       name: broker-acl
   ```
   
   3. sts挂载acl configmap到pod。`kubectl edit statefulsets.apps rocketmq-cluster-test-0-0`
   ```yaml
   apiVersion: apps/v1
   kind: StatefulSet
   ...
   spec:
     volumes:
     - configMap:
             defaultMode: 420
             name: broker-acl
           name: broker-acl
     containers:
       volumeMounts:
       - mountPath: /root/rocketmq/broker/conf/acl
             name: broker-acl
   ```
   
   可以实现acl配置热加载。


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org